{ "manifest_version": "1.0.0", "template": { "id": "fc48d0dd-a191-421b-aa4f-7f3e8a6ece3f", "slug": "firecrawl-1", "name": "Firecrawl", "description": "Web scraping and crawling API with authentication and persistent queues.", "url": "https://railway.com/deploy/firecrawl-1", "upstream": { "repo_url": "https://github.com/orenaksakal/railway-templates" } }, "services": [ { "name": "api", "source": { "image": "ghcr.io/firecrawl/firecrawl@sha256:03c94c9f99e0e4fc4ab9c844d2f64abb649396503180b14aeaf0a1169da88bab" }, "needs_volume": false, "http": false }, { "name": "firecrawl", "source": { "repo": "https://github.com/orenaksakal/railway-templates" }, "needs_volume": false, "http": true }, { "name": "redis", "source": { "image": "redis:7.4@sha256:71da9275c5f3fcb97d0fa0c8c5b36cc995327265420f17a04bfd544f458059f7" }, "needs_volume": true, "volume_mount_path": "/data", "http": false }, { "name": "postgres", "source": { "image": "ghcr.io/firecrawl/nuq-postgres@sha256:aed86f62858f29bd971abddcdeb301c12888098d2cf5d33c1ba42b053bc460f6" }, "needs_volume": true, "volume_mount_path": "/var/lib/postgresql/data", "http": false }, { "name": "browser", "source": { "image": "ghcr.io/firecrawl/playwright-service@sha256:df1a393ce8bfc3801570a826a9b0dcc400ae48789adb4a0ad9d6cbf0229b059b" }, "needs_volume": false, "http": false }, { "name": "rabbitmq", "source": { "image": "rabbitmq:3.13@sha256:87178a0ee3e2f52980ba356d38646ed1056705ff2d5ff281f8965456eaa0c1e3" }, "needs_volume": true, "volume_mount_path": "/var/lib/rabbitmq", "http": false } ], "required_inputs": [ { "key": "ENV", "service": "api", "description": "Firecrawl runtime mode. Keep local for this self-hosted deployment.", "secret": false, "strategy": "default", "default": "local" }, { "key": "HOST", "service": "api", "description": "HTTP bind address. Keep 0.0.0.0 so Railway can reach the service.", "secret": false, "strategy": "default", "default": "0.0.0.0" }, { "key": "PORT", "service": "api", "description": "HTTP port inside this service. Keep the default to match its Railway public port and health check.", "secret": false, "strategy": "default", "default": "3002" }, { "key": "REDIS_URL", "service": "api", "description": "Private authenticated Redis/Valkey connection URL. Automatically assembled from service references.", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "POSTGRES_DB", "service": "api", "description": "Initial PostgreSQL database name, or the matching database selected by the application.", "secret": false, "strategy": "default", "default": "postgres" }, { "key": "WORKER_PORT", "service": "api", "description": "Internal Firecrawl worker HTTP port. Keep the supplied port and do not expose it publicly.", "secret": false, "strategy": "default", "default": "3005" }, { "key": "BULL_AUTH_KEY", "service": "api", "description": "Generated secret protecting Firecrawl queue administration. Keep private.", "secret": true, "strategy": "generate", "generate": "random_base64_32" }, { "key": "POSTGRES_HOST", "service": "api", "description": "Private PostgreSQL hostname. Automatically resolved from the postgres service.", "secret": false, "strategy": "railway_provided", "railway_source": "railway_private_domain" }, { "key": "POSTGRES_PORT", "service": "api", "description": "Private PostgreSQL TCP port. Keep 5432.", "secret": false, "strategy": "default", "default": "5432" }, { "key": "POSTGRES_USER", "service": "api", "description": "PostgreSQL initialization user, or the matching connection user for the private database.", "secret": false, "strategy": "default", "default": "postgres" }, { "key": "NUQ_RABBITMQ_URL", "service": "api", "description": "Private RabbitMQ connection URL for the NuQ queue, using generated broker credentials.", "secret": false, "strategy": "railway_provided", "railway_source": "railway_private_domain" }, { "key": "BROWSER_POOL_SIZE", "service": "api", "description": "Firecrawl browser pool size. Starts at 2; increase only after measuring memory use.", "secret": false, "strategy": "default", "default": "2" }, { "key": "POSTGRES_PASSWORD", "service": "api", "description": "PostgreSQL password. Generated for the database and referenced by dependent services; keep private.", "secret": true, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "EXTRACT_WORKER_PORT", "service": "api", "description": "Internal extraction-worker port. Keep the supplied port and leave it private.", "secret": false, "strategy": "default", "default": "3004" }, { "key": "MAX_CONCURRENT_JOBS", "service": "api", "description": "Maximum simultaneous Firecrawl jobs. Increase only when memory and queue latency permit.", "secret": false, "strategy": "default", "default": "2" }, { "key": "ALLOW_LOCAL_WEBHOOKS", "service": "api", "description": "Allow webhook requests to local/private targets. Keep false to restrict access to internal networks.", "secret": false, "strategy": "default", "default": "false" }, { "key": "REDIS_RATE_LIMIT_URL", "service": "api", "description": "Private Redis URL used for Firecrawl rate limiting. References the authenticated redis service.", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "NUM_WORKERS_PER_QUEUE", "service": "api", "description": "Workers per Firecrawl queue. Increase after measuring CPU, memory, and queue latency.", "secret": false, "strategy": "default", "default": "2" }, { "key": "USE_DB_AUTHENTICATION", "service": "api", "description": "Internal Firecrawl database authentication toggle. Keep false with this private API and authenticated public gateway.", "secret": false, "strategy": "default", "default": "false" }, { "key": "CRAWL_CONCURRENT_REQUESTS", "service": "api", "description": "Concurrent requests per crawl. Starts at 2; respect target-site rate limits.", "secret": false, "strategy": "default", "default": "2" }, { "key": "HARNESS_STARTUP_TIMEOUT_MS", "service": "api", "description": "Maximum Firecrawl harness startup wait in milliseconds. Increase if cold starts need more time.", "secret": false, "strategy": "default", "default": "180000" }, { "key": "PLAYWRIGHT_MICROSERVICE_URL", "service": "api", "description": "Private browser renderer scrape endpoint. Automatically references the browser service.", "secret": false, "strategy": "railway_provided", "railway_source": "railway_private_domain" }, { "key": "PORT", "service": "firecrawl", "description": "HTTP port inside this service. Keep the default to match its Railway public port and health check.", "secret": false, "strategy": "default", "default": "8080" }, { "key": "API_KEY", "service": "firecrawl", "description": "Generated API authentication key, or a reference to the shared internal API key. Keep private and preserve matching references.", "secret": true, "strategy": "generate", "generate": "random_base64_32" }, { "key": "UPSTREAM_URL", "service": "firecrawl", "description": "Private Firecrawl API URL used by the public gateway. Keep the api service reference.", "secret": false, "strategy": "railway_provided", "railway_source": "railway_private_domain" }, { "key": "RAILWAY_DOCKERFILE_PATH", "service": "firecrawl", "description": "Repository-relative Dockerfile used to build this service. Keep the supplied path.", "secret": false, "strategy": "default", "default": "templates/firecrawl/Gateway.Dockerfile" }, { "key": "REDIS_URL", "service": "redis", "description": "Private authenticated Redis/Valkey connection URL. Automatically assembled from service references.", "secret": false, "strategy": "railway_provided", "railway_source": "railway_private_domain" }, { "key": "REDIS_PASSWORD", "service": "redis", "description": "Generated private Redis/Valkey password, or a reference to that password. Keep secret.", "secret": true, "strategy": "generate", "generate": "strong_password" }, { "key": "PGDATA", "service": "postgres", "description": "PostgreSQL data directory within the persistent volume. Do not change on an existing database.", "secret": false, "strategy": "default", "default": "/var/lib/postgresql/data/pgdata" }, { "key": "POSTGRES_DB", "service": "postgres", "description": "Initial PostgreSQL database name, or the matching database selected by the application.", "secret": false, "strategy": "default", "default": "postgres" }, { "key": "POSTGRES_USER", "service": "postgres", "description": "PostgreSQL initialization user, or the matching connection user for the private database.", "secret": false, "strategy": "default", "default": "postgres" }, { "key": "POSTGRES_PASSWORD", "service": "postgres", "description": "PostgreSQL password. Generated for the database and referenced by dependent services; keep private.", "secret": true, "strategy": "generate", "generate": "strong_password" }, { "key": "PORT", "service": "browser", "description": "HTTP port inside this service. Keep the default to match its Railway public port and health check.", "secret": false, "strategy": "default", "default": "3000" }, { "key": "BLOCK_MEDIA", "service": "browser", "description": "Block browser media downloads to reduce resource usage during scraping.", "secret": false, "strategy": "default", "default": "true" }, { "key": "ALLOW_LOCAL_WEBHOOKS", "service": "browser", "description": "Allow webhook requests to local/private targets. Keep false to restrict access to internal networks.", "secret": false, "strategy": "default", "default": "false" }, { "key": "MAX_CONCURRENT_PAGES", "service": "browser", "description": "Maximum concurrent renderer pages. Starts at 2 to limit browser memory usage.", "secret": false, "strategy": "default", "default": "2" }, { "key": "RABBITMQ_NODENAME", "service": "rabbitmq", "description": "Stable RabbitMQ node identity for persisted queue data. Keep rabbit@localhost across redeployments.", "secret": false, "strategy": "default", "default": "rabbit@localhost" }, { "key": "RABBITMQ_DEFAULT_PASS", "service": "rabbitmq", "description": "Generated RabbitMQ password. Preserve it with the persistent broker data.", "secret": false, "strategy": "generate", "generate": "random_base64_32" }, { "key": "RABBITMQ_DEFAULT_USER", "service": "rabbitmq", "description": "RabbitMQ user created on first initialization. Keep aligned with the NuQ connection URL.", "secret": false, "strategy": "default", "default": "firecrawl" } ], "deploy": { "mcp": { "server": "railway", "tool": "deploy_template", "args": { "template_code": "firecrawl-1" } }, "cli": "railway deploy --template firecrawl-1", "api": { "method": "POST", "path": "/graphql/v2", "body": { "query": "mutation templateDeploy($input: TemplateDeployV2Input!) { templateDeployV2(input: $input) { projectId workflowId } }", "variables": { "input": { "templateId": "fc48d0dd-a191-421b-aa4f-7f3e8a6ece3f", "serializedConfig": { "services": { "1c2b41a7-b679-5f8a-bd41-a3161883f1ac": { "name": "api", "deploy": { "startCommand": "node dist/src/harness.js --start-docker", "restartPolicyType": "ON_FAILURE", "restartPolicyMaxRetries": 5 }, "source": { "image": "ghcr.io/firecrawl/firecrawl@sha256:03c94c9f99e0e4fc4ab9c844d2f64abb649396503180b14aeaf0a1169da88bab" }, "variables": { "ENV": { "isOptional": false, "description": "Firecrawl runtime mode. Keep local for this self-hosted deployment.", "defaultValue": "local" }, "HOST": { "isOptional": false, "description": "HTTP bind address. Keep 0.0.0.0 so Railway can reach the service.", "defaultValue": "0.0.0.0" }, "PORT": { "isOptional": false, "description": "HTTP port inside this service. Keep the default to match its Railway public port and health check.", "defaultValue": "3002" }, "REDIS_URL": { "isOptional": false, "description": "Private authenticated Redis/Valkey connection URL. Automatically assembled from service references.", "defaultValue": "${{redis.REDIS_URL}}" }, "POSTGRES_DB": { "isOptional": false, "description": "Initial PostgreSQL database name, or the matching database selected by the application.", "defaultValue": "postgres" }, "WORKER_PORT": { "isOptional": false, "description": "Internal Firecrawl worker HTTP port. Keep the supplied port and do not expose it publicly.", "defaultValue": "3005" }, "BULL_AUTH_KEY": { "isOptional": false, "description": "Generated secret protecting Firecrawl queue administration. Keep private.", "defaultValue": "{{BULL_AUTH_KEY}}" }, "POSTGRES_HOST": { "isOptional": false, "description": "Private PostgreSQL hostname. Automatically resolved from the postgres service.", "defaultValue": "${{postgres.RAILWAY_PRIVATE_DOMAIN}}" }, "POSTGRES_PORT": { "isOptional": false, "description": "Private PostgreSQL TCP port. Keep 5432.", "defaultValue": "5432" }, "POSTGRES_USER": { "isOptional": false, "description": "PostgreSQL initialization user, or the matching connection user for the private database.", "defaultValue": "postgres" }, "NUQ_RABBITMQ_URL": { "isOptional": false, "description": "Private RabbitMQ connection URL for the NuQ queue, using generated broker credentials.", "defaultValue": "amqp://firecrawl:${{rabbitmq.RABBITMQ_DEFAULT_PASS}}@${{rabbitmq.RAILWAY_PRIVATE_DOMAIN}}:5672" }, "BROWSER_POOL_SIZE": { "isOptional": false, "description": "Firecrawl browser pool size. Starts at 2; increase only after measuring memory use.", "defaultValue": "2" }, "POSTGRES_PASSWORD": { "isOptional": false, "description": "PostgreSQL password. Generated for the database and referenced by dependent services; keep private.", "defaultValue": "${{postgres.POSTGRES_PASSWORD}}" }, "EXTRACT_WORKER_PORT": { "isOptional": false, "description": "Internal extraction-worker port. Keep the supplied port and leave it private.", "defaultValue": "3004" }, "MAX_CONCURRENT_JOBS": { "isOptional": false, "description": "Maximum simultaneous Firecrawl jobs. Increase only when memory and queue latency permit.", "defaultValue": "2" }, "ALLOW_LOCAL_WEBHOOKS": { "isOptional": false, "description": "Allow webhook requests to local/private targets. Keep false to restrict access to internal networks.", "defaultValue": "false" }, "REDIS_RATE_LIMIT_URL": { "isOptional": false, "description": "Private Redis URL used for Firecrawl rate limiting. References the authenticated redis service.", "defaultValue": "${{redis.REDIS_URL}}" }, "NUM_WORKERS_PER_QUEUE": { "isOptional": false, "description": "Workers per Firecrawl queue. Increase after measuring CPU, memory, and queue latency.", "defaultValue": "2" }, "USE_DB_AUTHENTICATION": { "isOptional": false, "description": "Internal Firecrawl database authentication toggle. Keep false with this private API and authenticated public gateway.", "defaultValue": "false" }, "CRAWL_CONCURRENT_REQUESTS": { "isOptional": false, "description": "Concurrent requests per crawl. Starts at 2; respect target-site rate limits.", "defaultValue": "2" }, "HARNESS_STARTUP_TIMEOUT_MS": { "isOptional": false, "description": "Maximum Firecrawl harness startup wait in milliseconds. Increase if cold starts need more time.", "defaultValue": "180000" }, "PLAYWRIGHT_MICROSERVICE_URL": { "isOptional": false, "description": "Private browser renderer scrape endpoint. Automatically references the browser service.", "defaultValue": "http://${{browser.RAILWAY_PRIVATE_DOMAIN}}:3000/scrape" } }, "networking": { "serviceDomains": {} } }, "261449cb-6560-5d40-a436-c1b4b8072043": { "name": "firecrawl", "build": { "builder": "RAILPACK", "dockerfilePath": "templates/firecrawl/Gateway.Dockerfile" }, "deploy": { "healthcheckPath": "/healthz", "restartPolicyType": "ON_FAILURE", "healthcheckTimeout": 600, "restartPolicyMaxRetries": 5 }, "source": { "repo": "orenaksakal/railway-templates", "branch": "codex/railway-template-release" }, "variables": { "PORT": { "isOptional": false, "description": "HTTP port inside this service. Keep the default to match its Railway public port and health check.", "defaultValue": "8080" }, "API_KEY": { "isOptional": false, "description": "Generated API authentication key, or a reference to the shared internal API key. Keep private and preserve matching references.", "defaultValue": "{{API_KEY}}" }, "UPSTREAM_URL": { "isOptional": false, "description": "Private Firecrawl API URL used by the public gateway. Keep the api service reference.", "defaultValue": "http://${{api.RAILWAY_PRIVATE_DOMAIN}}:3002" }, "RAILWAY_DOCKERFILE_PATH": { "isOptional": false, "description": "Repository-relative Dockerfile used to build this service. Keep the supplied path.", "defaultValue": "templates/firecrawl/Gateway.Dockerfile" } }, "networking": { "serviceDomains": { ":8080": { "port": 8080 } } } }, "2c0d1ce6-5141-57f2-b50a-2ee3829927b9": { "name": "redis", "deploy": { "startCommand": "sh -c 'exec redis-server --bind 0.0.0.0 --appendonly yes --maxmemory-policy noeviction --requirepass \"$REDIS_PASSWORD\"'", "requiredMountPath": "/data", "restartPolicyType": "ON_FAILURE", "restartPolicyMaxRetries": 5 }, "source": { "image": "redis:7.4@sha256:71da9275c5f3fcb97d0fa0c8c5b36cc995327265420f17a04bfd544f458059f7" }, "variables": { "REDIS_URL": { "isOptional": false, "description": "Private authenticated Redis/Valkey connection URL. Automatically assembled from service references.", "defaultValue": "redis://:${{redis.REDIS_PASSWORD}}@${{redis.RAILWAY_PRIVATE_DOMAIN}}:6379" }, "REDIS_PASSWORD": { "isOptional": false, "description": "Generated private Redis/Valkey password, or a reference to that password. Keep secret.", "defaultValue": "{{REDIS_PASSWORD}}" } }, "networking": { "serviceDomains": {} }, "volumeMounts": { "623ea7a2-1826-5278-87cc-fb0123bbac1d": { "mountPath": "/data" } } }, "9b9e29cf-ee1b-594a-b73b-98916451d01d": { "name": "postgres", "deploy": { "requiredMountPath": "/var/lib/postgresql/data", "restartPolicyType": "ON_FAILURE", "restartPolicyMaxRetries": 5 }, "source": { "image": "ghcr.io/firecrawl/nuq-postgres@sha256:aed86f62858f29bd971abddcdeb301c12888098d2cf5d33c1ba42b053bc460f6" }, "variables": { "PGDATA": { "isOptional": false, "description": "PostgreSQL data directory within the persistent volume. Do not change on an existing database.", "defaultValue": "/var/lib/postgresql/data/pgdata" }, "POSTGRES_DB": { "isOptional": false, "description": "Initial PostgreSQL database name, or the matching database selected by the application.", "defaultValue": "postgres" }, "POSTGRES_USER": { "isOptional": false, "description": "PostgreSQL initialization user, or the matching connection user for the private database.", "defaultValue": "postgres" }, "POSTGRES_PASSWORD": { "isOptional": false, "description": "PostgreSQL password. Generated for the database and referenced by dependent services; keep private.", "defaultValue": "{{POSTGRES_PASSWORD}}" } }, "networking": { "serviceDomains": {} }, "volumeMounts": { "fce22db3-b075-5a94-ba1f-d1525bbeaff1": { "mountPath": "/var/lib/postgresql/data" } } }, "aaf9ab89-9beb-5885-ad81-897b035ebf8a": { "name": "browser", "deploy": { "restartPolicyType": "ON_FAILURE", "restartPolicyMaxRetries": 5 }, "source": { "image": "ghcr.io/firecrawl/playwright-service@sha256:df1a393ce8bfc3801570a826a9b0dcc400ae48789adb4a0ad9d6cbf0229b059b" }, "variables": { "PORT": { "isOptional": false, "description": "HTTP port inside this service. Keep the default to match its Railway public port and health check.", "defaultValue": "3000" }, "BLOCK_MEDIA": { "isOptional": false, "description": "Block browser media downloads to reduce resource usage during scraping.", "defaultValue": "true" }, "ALLOW_LOCAL_WEBHOOKS": { "isOptional": false, "description": "Allow webhook requests to local/private targets. Keep false to restrict access to internal networks.", "defaultValue": "false" }, "MAX_CONCURRENT_PAGES": { "isOptional": false, "description": "Maximum concurrent renderer pages. Starts at 2 to limit browser memory usage.", "defaultValue": "2" } }, "networking": { "serviceDomains": {} } }, "b23aac6c-74d3-57d0-8b5f-fdedf040f8bd": { "name": "rabbitmq", "deploy": { "requiredMountPath": "/var/lib/rabbitmq", "restartPolicyType": "ON_FAILURE", "restartPolicyMaxRetries": 5 }, "source": { "image": "rabbitmq:3.13@sha256:87178a0ee3e2f52980ba356d38646ed1056705ff2d5ff281f8965456eaa0c1e3" }, "variables": { "RABBITMQ_NODENAME": { "isOptional": false, "description": "Stable RabbitMQ node identity for persisted queue data. Keep rabbit@localhost across redeployments.", "defaultValue": "rabbit@localhost" }, "RABBITMQ_DEFAULT_PASS": { "isOptional": false, "description": "Generated RabbitMQ password. Preserve it with the persistent broker data.", "defaultValue": "{{RABBITMQ_DEFAULT_PASS}}" }, "RABBITMQ_DEFAULT_USER": { "isOptional": false, "description": "RabbitMQ user created on first initialization. Keep aligned with the NuQ connection URL.", "defaultValue": "firecrawl" } }, "networking": { "serviceDomains": {} }, "volumeMounts": { "b8cbd873-6090-55dc-bfcd-1c4f9ee0a3dd": { "mountPath": "/var/lib/rabbitmq" } } } } } } } } } }, "post_deploy": { "healthcheck": { "service": "firecrawl", "method": "GET", "path": "/healthz", "expect_status": 200 } }, "resources": { "expected_services": 6, "needs_volume": true }, "generated_at": "2026-09-08T05:54:19.399Z", "generator_version": "0.1.0", "status": "validated", "validated_at": "2026-09-08T06:06:59.990Z", "success_rate_30d": 1, "validation": { "last_run_id": "run_2d206c83e57945359ca6", "checks": [ { "name": "workflow_completed", "passed": true }, { "name": "all_services_deployed", "passed": true }, { "name": "healthcheck", "passed": true }, { "name": "stays_up", "passed": true } ], "typical_ready_seconds": 57, "typical_build_seconds": 0, "typical_start_seconds": 20, "slowest_service": "api" } }